Interactive query by example expert system for autonomous data protection

Abstract

One example method includes scanning a storage device to obtain data and metadata concerning operation of a computing system, analyzing the data and, based on the analyzing, deriving data groups that include some of the data, and deriving data relationships among some of the data, receiving, by an expert system, a query from a user, and the query specifies a sample object for the expert system to investigate, but the query does not indicate purpose of the user in submitting the query, analyzing the query, based on the data groups and data relationships, and based on the analyzing of the query, generating, by the expert system, query results that comprise a set of user-selectable investigation directions that relate to the sample object, and presenting, by the expert system, the set of user-selectable investigation directions to the user.

What is claimed is: 
     
       1. A method, comprising:
 scanning a storage device to obtain data and metadata concerning operation of a computing system; 
 analyzing the data and, based on the analyzing, deriving data groups that include some of the data, and deriving data relationships among some of the data; 
 receiving, by an expert system, a query from a user, wherein the query provides a sample object for the expert system to investigate to gain information about the sample object, but the query does not indicate purpose of the user in submitting the query; 
 analyzing the query; 
 based on the data groups and data relationships, and based on the analyzing of the query, generating, by the expert system, query results that comprise a set of user-selectable investigation directions that relate to the sample object, wherein the set of user-selectable investigation directions comprise queries including refinement or modification to the query from the user; and 
 presenting, by the expert system, the set of user-selectable investigation directions to the user, 
 wherein one of the user-selectable investigation directions is a starting point for an investigation to be performed by the expert system, but does not identify a resolution to a problem or a condition, 
 wherein the expert system ranks the set of user-selectable investigation directions by one or more of relevance, context, and diversity, of the user-selectable investigation directions, and 
 wherein the sample object is a virtual machine (VM) that is not operating as expected by the user. 
 
     
     
       2. The method as recited in  claim 1 , wherein the computing system is a data protection system. 
     
     
       3. The method as recited in  claim 1 , wherein the expert system creates the user-selectable investigation directions based on a similarity analysis and a dissimilarity analysis. 
     
     
       4. The method as recited in  claim 1 , wherein the computing system is a data protection system, and the sample object is an object that is protected by the data protection system. 
     
     
       5. The method as recited in  claim 1 , wherein at an end of an investigation that corresponds to one of the user-selectable investigation directions, the expert system presents, to the user, one or more user-selectable resolutions to a problem identified during the investigation. 
     
     
       6. The method as recited in  claim 1 , wherein the expert system creates the user-selectable investigation directions based on a similarity analysis that evaluates one or more objects similar to an example object, and based on a dissimilarity analysis. 
     
     
       7. The method as recited in  claim 1 , further comprising receiving a user selection of one of the investigation directions and, in response to the user selection, the expert system suggests, to the user, options for refining the query to continue an investigation that corresponds to the investigation direction selected by the users. 
     
     
       8. A computer readable storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
 scanning a storage device to obtain data and metadata concerning operation of a computing system; 
 analyzing the data and, based on the analyzing, deriving data groups that include some of the data, and deriving data relationships among some of the data; 
 
       receiving, by an expert system, a query from a user, wherein the query provides a sample object for the expert system to investigate to obtain information about the sample object, but the query does not indicate purpose of the user in submitting the query;
 analyzing the query; 
 based on the data groups and data relationships, and based on the analyzing of the query, generating, by the expert system, query results that comprise a set of user-selectable investigation directions that relate to the sample object, wherein the set of user-selectable investigation directions comprise queries including refinement or modification to the query from the user; and 
 presenting, by the expert system, the set of user-selectable investigation directions to the user, 
 wherein one of the user-selectable investigation directions is a starting point for an investigation to be performed by the expert system, but does not identify a resolution to a problem or a condition, 
 wherein the expert system ranks the set of user-selectable investigation directions by one or more of relevance, context, and diversity, of the user-selectable investigation directions, and 
 wherein the sample object is a virtual machine (VM) that is not operating as expected by the user. 
 
     
     
       9. The computer readable storage medium as recited in  claim 8 , wherein the computing system is a data protection system. 
     
     
       10. The computer readable storage medium as recited in  claim 8 , wherein the expert system creates the user-selectable investigation directions based on a similarity analysis and a dissimilarity analysis. 
     
     
       11. The computer readable storage medium as recited in  claim 8 , wherein the computing system is a data protection system, and the sample object is an object that is protected by the data protection system. 
     
     
       12. The computer readable storage medium as recited in  claim 8 , wherein at an end of an investigation that corresponds to one of the user-selectable investigation directions, the expert system presents, to the user, one or more user-selectable resolutions to a problem identified during the investigation. 
     
     
       13. The computer readable storage medium as recited in  claim 8 , wherein the expert system creates the user-selectable investigation directions based on a similarity analysis that evaluates one or more objects similar to an example object, and based on a dissimilarity analysis. 
     
     
       14. The computer readable storage medium as recited in  claim 8 , further comprising receiving a user selection of one of the investigation directions and, in response to the user selection, the expert system suggests, to the user, options for refining the query to continue an investigation that corresponds to the investigation direction selected by the users.